$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer (raw, json) Hash identifier: 5wx3tnYENruZmY2kgTN8yleRxv1+x2SbydRaT1qOFD8= Subject key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1290955D415F59AC65FDDB4C8A1ED7A8CFB04929 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft caRepository: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 00:06:39 +0000 Certificate not after: Fri 06 Mar 2026 00:11:39 +0000 Subordinate resources: AS: 52694 IP: 177.73.36.0/22 IP: 200.6.128.0/22 IP: 2804:c58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:90:95:5d:41:5f:59:ac:65:fd:db:4c:8a:1e:d7:a8:cf:b0:49:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 00:06:39 2025 GMT Not After : Mar 6 00:11:39 2026 GMT Subject: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:45:bf:2d:ad:9c:19:85:9e:c1:a4:8b:86: 57:a5:2b:3d:55:ae:19:f6:14:bc:c1:f0:aa:a3:24: 7e:f1:56:5b:1c:85:4f:1b:4b:d1:7e:a8:9d:bc:b9: 8d:6b:5c:47:9f:8c:5f:f9:53:2c:2c:0a:04:10:e5: e0:12:8b:8b:d0:97:ca:08:99:c8:51:ac:46:9b:56: 00:24:22:da:0a:8f:82:cb:16:b2:80:49:6e:df:5d: 27:8e:45:32:ad:8a:6a:28:68:50:69:d8:47:b4:7a: 15:53:2e:88:19:b6:87:62:16:5b:ea:56:b1:e5:04: 00:c3:67:bb:9f:79:90:24:04:c3:19:d1:67:69:67: fe:02:65:f9:16:76:e1:54:0c:aa:ac:34:41:5d:67: 27:d0:d7:b6:32:c1:19:94:a1:cb:be:80:4e:b2:9c: 8e:48:7a:37:ec:62:4e:fa:7e:49:fb:07:af:eb:ef: eb:61:ae:2c:07:aa:c2:02:c5:11:f9:6f:93:b1:c1: 2c:2a:4a:54:f6:1e:d4:2e:a8:c1:fb:6c:05:0f:c9: 37:4f:60:1b:0f:e0:58:0d:e1:4a:a2:35:c7:ee:08: 53:cb:3f:a1:88:bd:42:ca:5d:a3:14:e4:04:d9:c9: dd:fb:3c:12:54:86:c4:b2:46:f8:40:e8:1d:ff:5b: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.36.0/22 200.6.128.0/22 IPv6: 2804:c58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52694 Signature Algorithm: sha256WithRSAEncryption 1a:ea:5a:ba:de:cc:a0:a7:0d:40:49:79:04:1f:bf:00:0c:b8: 00:b3:12:13:7b:54:89:17:a6:2b:91:69:03:52:13:12:b6:81: ee:75:e1:c8:f0:ca:33:cb:c4:89:5d:54:c5:6b:84:f9:96:ec: 9c:de:da:38:b2:33:f4:2d:30:35:4b:8a:1a:05:5a:7d:e5:78: 3d:8e:7e:67:13:05:7c:f4:e1:44:d0:4a:a0:00:b9:d7:b6:2b: 31:53:e5:48:d0:f9:24:20:bf:cd:24:a7:4b:f7:a0:e8:6b:9c: 9a:c5:25:68:3b:1f:b1:0b:fc:ab:1b:f3:94:b2:16:e3:51:54: db:35:4b:7f:3d:42:9d:ec:48:4c:aa:81:0a:22:af:36:4b:77: 07:5f:41:f7:8b:2f:bb:7f:f6:56:22:65:55:53:53:f8:f0:22: b4:1f:19:76:74:28:36:83:5d:16:f8:fd:fa:2b:33:7f:75:69: 1a:9e:1d:1a:b3:3c:c8:0e:c2:7d:f4:81:c3:35:ac:59:1b:40: 68:cf:a4:c3:a5:d6:1f:7a:1f:5e:b9:5a:da:37:83:11:4e:f7: bb:44:cf:66:7d:5e:6b:62:75:6c:d4:d7:c7:5a:a0:7e:a9:0b: 1e:6c:0d:89:d5:f9:23:c7:10:39:68:15:00:d4:1e:95:3d:30: f5:1a:c2:8c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEpCVXUFfWaxl/dtMih7XqM+wSSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMDA2MzlaFw0yNjAzMDYwMDExMzlaMDMxMTAvBgNV BAMTKDNEQUYxQ0E0ODYzM0Q0MkYzODk1NUM0N0M4QkEwRkFEQTczRDcwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKUW/La2cGYWewaSLhlelKz1V rhn2FLzB8KqjJH7xVlschU8bS9F+qJ28uY1rXEefjF/5UywsCgQQ5eASi4vQl8oI mchRrEabVgAkItoKj4LLFrKASW7fXSeORTKtimooaFBp2Ee0ehVTLogZtodiFlvq VrHlBADDZ7ufeZAkBMMZ0WdpZ/4CZfkWduFUDKqsNEFdZyfQ17YywRmUocu+gE6y nI5IejfsYk76fkn7B6/r7+thriwHqsICxRH5b5OxwSwqSlT2HtQuqMH7bAUPyTdP YBsP4FgN4UqiNcfuCFPLP6GIvULKXaMU5ATZyd37PBJUhsSyRvhA6B3/W7LrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9rxykhjPULziV XEfIug+tpz1wBzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjk2 OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5 Njk1WEVua2hWemV1ZFhma1U2RlZQYkdGWDZXVUs3ZXNOQnpoSFJMN3BkLzAvM0RB RjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURBNzNENzAwNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUkkAwQCyAaAMA0EAgACMAcDBQAoBAxYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDN1jANBgkqhkiG9w0BAQsFAAOCAQEAGupaut7M oKcNQEl5BB+/AAy4ALMSE3tUiRemK5FpA1ITEraB7nXhyPDKM8vEiV1UxWuE+Zbs nN7aOLIz9C0wNUuKGgVafeV4PY5+ZxMFfPThRNBKoAC517YrMVPlSND5JCC/zSSn S/eg6GucmsUlaDsfsQv8qxvzlLIW41FU2zVLfz1CnexITKqBCiKvNkt3B19B94sv u3/2ViJlVVNT+PAitB8ZdnQoNoNdFvj9+iszf3VpGp4dGrM8yA7CffSBwzWsWRtA aM+kw6XWH3ofXrla2jeDEU73u0TPZn1ea2J1bNTXx1qgfqkLHmwNidX5I8cQOWgV ANQelT0w9RrCjA== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:15 2025 by rpki-client on console.sobornost.net